CVE Intelligence

Centreon Awie vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Centreon Awie: 2 record(s), with affected versions and fixes.
cpe:2.3:a:centreon:awie

CVE-2025-15029 Critical · 9.8 CWE-89 Jan 5, 2026
An unauthenticated user is able to introduce SQL Injection using the Awie export module
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon Infra Monitoring (Awie export modules) allows SQL Injection to unauthenticated user. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.3, from 24.04.0 before 24.04.3.
CVE-2025-15026 Critical · 9.8 CWE-306 Jan 5, 2026
Unauthenticated configuration import allows administrative account creation using AWIE component
Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon-awie (Awie import module) allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.3, from 24.04.0 before 24.04.3.